0

I have been told to install a client server application, and the problem is that I am using Windows machine.

Any application can easily access any data in Windows machine. How can I make sure that application is working wisely?

Are there some raw ways to tell like watch packets that app is sending and receiving.

1
  • 2
    these 2 label conflicts :) Mar 1, 2011 at 16:50

1 Answer 1

3
  1. You can't
  2. You can try with running it with another (unprivileged) user, which is rather difficult, if you need other applications too.

With Process Explorer you can explore what resources process is using, including open files.

With PsExec you can start applications with another user's permissions.

Both are from Microsoft's sysinternals package.

As noted in comments, Wireshark is good (and free) network sniffer for monitoring what application is sending to internet, or whether it's downloading some additional payload over network.

Also, it might be good idea to run that application inside virtual machine. That way your normal installation isn't messed up, if it's doing something malicious.

7
  • 2 is somewhat illogical. but there must be some way. Mar 1, 2011 at 16:55
  • 1
    umm, what do you mean by illogical? When you are running it with another user, it can't access your files (without exploiting windows bug, that is.)
    – Olli
    Mar 1, 2011 at 16:57
  • I agree with olli here, but I want to add that wireshark might be a good choice if you want to analyze what is being sent over the network to the server. Mar 1, 2011 at 17:04
  • @Kyle @Olli I meant, suppose I try it with user X then it would be accessing X's private file. I want to make sure. Mar 1, 2011 at 17:05
  • 1
    Oh, I misunderstood. I understood you want to protect your files, not check that software in general. Process Explorer and Wireshark are good tools for easily exploring what that software is doing.
    – Olli
    Mar 1, 2011 at 17:06

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .